Default posture: inference and sensitive document processing remain inside the client-controlled environment. Public SaaS relays are not assumed.
Typical topologies include fully air-gapped enclaves, private cloud VPCs with zero-egress policies, and hybrid control planes where only non-sensitive telemetry leaves the perimeter.
- Air-gapped enclaves for regulated workloads
- Private cloud with egress locks
- Client-owned keys, logs, and model weights where required